Skip to content
OpenAdvisories
Unscored CVE-2022-22726 EUVD-2022-27869GHSA-rmf5-6wwh-2vw5

A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users t…

Published Feb 4, 2022 · Updated Aug 3, 2024 · Assigned by schneider

Description

A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users through a limited operating system service account. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

Affected products

VendorProductAffectedFixed
— EcoStruxure Power Monitoring Expert (Versions 2020 and prior) EcoStruxure Power Monitoring Expert (Versions 2020 and prior) —

Advisories 1

References